command-line-murders/i-03ac030929db25641
by SadServersMore by SadServers
total 52K drwxr-xr-x 7 admin admin 4.0K Jan 1 17:19 . drwxr-xr-x 3 root root 4.0K Sep 17 16:44 .. drwx------ 3 admin admin 4.0K Sep 20 15:52 .ansible -rw------- 1 admin admin 517 Jan 1 17:22 .bash_history -rw-r--r-- 1 admin admin 220 Aug 4 2021 .bash_logout -rw-r--r-- 1 admin admin 3.5K Aug 4 2021 .bashrc drwxr-xr-x 3 admin admin 4.0K Sep 20 15:56 .config drwxr-xr-x 3 admin admin 4.0K Jan 1 17:19 .local -rw-r--r-- 1 admin admin 807 Aug 4 2021 .profile drwx------ 2 admin admin 4.0K Sep 17 16:44 .ssh -rw-r--r-- 1 admin admin 1.0K Jan 1 17:19 .webserver.py.swp drwxr-xr-x 2 admin root 4.0K Sep 24 23:20 agent -rwxrwx--- 1 root root 360 Sep 24 23:20 webserver.py admin@i-02771b3f9cef454ca:~$ curl localhost:5000/
paris/i-02771b3f9cef454ca 03:47
by SadServers> Host: 127.0.0.1:5000 > User-Agent: curl/7.74.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Server: Werkzeug/2.3.7 Python/3.9.2 < Date: Tue, 14 Jan 2025 19:29:25 GMT < Content-Type: text/html; charset=utf-8 < Content-Length: 12 < Connection: close < * Closing connection 0 Unauthorizedadmin@i-0ec82287eecb31de5:~$ admin@i-0ec82287eecb31de5:~$ find / -newer t 2
paris/i-0ec82287eecb31de5 06:56
by SadServersunix 3 [ ] STREAM CONNECTED 11366 unix 3 [ ] STREAM CONNECTED 11352 unix 3 [ ] STREAM CONNECTED 11353 /run/systemd/journal/unix 3 [ ] STREAM CONNECTED 11367 /run/dbus/system_bus_admin@i-04e9b3dc5974733a8:~$ netstat -nptl (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp6 0 0 :::6767 :::* LISTEN tcp6 0 0 :::8080 :::* LISTEN tcp6 0 0 :::22 :::* LISTEN admin@i-04e9b3dc5974733a8:~$ telnet
paris/i-04e9b3dc5974733a8 01:25
by SadServerswrite(2, ":", 1:) = 1 write(2, "64", 264) = 2 write(2, " +", 2 +) = 2 write(2, "0x47d", 50x47d) = 5 write(2, "\n", 1 ) = 1 exit_group(2) = ? +++ exited with 2 +++ admin@i-0a7b505525f0420f4:~$ ls agent data datafile kihei admin@i-0a7b505525f0420f4:~$ ^C admin@i-0a7b505525f0420f4:~$ cd /home/admin/ admin@i-0a7b505525f0420f4:~$ ls agent data datafile kihei admin@i-0a7b505525f0420f4:~$ cd